IAM Security Engineer: Scale Secure Identities

CloudFlare; Austin (TX); Hybrid; USD 130,000 - 185,000; Full time

Job summary

Cloudflare is seeking an Identity and Access Management (IAM) Security Engineer to design, implement, and scale IAM solutions for our internal workforce and workloads. You will safeguard systems by ensuring secure user access, authentication, and authorization across Cloudflare applications.

Hybrid role from Austin, TX with opportunities to advance IAM governance, SSO integrations, RBAC/ABAC, ITDR, and automation using AI/LLMs to improve security operations.

Qualifications

• Working knowledge of identity federation (SAML, OAuth, OpenID Connect).
• Experience with IGA solutions including lifecycle management, SCIM, RBAC/ABAC.
• Hands‑on automation scripting and AI/LLMs to solve operations challenges.
• Security engineering experience with container platforms (Kubernetes).
• Advanced scripting in Python/TypeScript/Bash; Zero Trust controls.

Responsibilities

• Design, build, test, and deploy IAM solutions across authentication, authorization, and accounting.
• Leverage Cloudflare products to secure our identities.
• Build SSO integrations leveraging SAML, OIDC, OAuth, and SCIM.
• Develop and manage IAM governance and administration platforms.
• Develop automated RBAC/ABAC roles and access certifications.
• Build and manage an access certification platform and PAM.
• Provide on‑call support for IAM systems.

Skills

Identity federation

IGA lifecycle management

Automation scripts

AI/LLMs in ops

Kubernetes

Scripting (Python/TS/Bash)

Zero Trust

ITDR

Policy enforcement

SaaS integrations

Tools

Terraform

Ansible

Job description

Cloudflare is seeking an Identity and Access Management (IAM) Security Engineer to design, implement, and scale IAM solutions for our internal workforce and workloads. You will safeguard systems by ensuring secure user access, authentication, and authorization across Cloudflare applications.

Hybrid role from Austin, TX with opportunities to advance IAM governance, SSO integrations, RBAC/ABAC, ITDR, and automation using AI/LLMs to improve security operations.